
SYSTEM AND METHOD FOR PROTECTING DIGITAL MEDIA 
BACKGROUND OF THE INVENTION 

1. Technical Field 

The present invention relates generally to security systems 
5 for digital recordings, and more particularly relates to anti- 
pirating schemes for controlling the copying, playing, and 
distribution of digital music. 

i J 

w 2 . Related Art 

The popularity of both the Internet and digital media 

M 

fG[ technologies (e.g., compact disks "CD's" and digital versatile 

iy 

disks "DVD's") has created tremendous problems for copyright 

fy owners of digital media content. The ability to reproduce, play 

f 

Ifl and transmit digital content has become readily available to 

d 

0 anyone with a personal computer and access to the Internet . 
15 This ability has led to widespread abuses to the rights of 

copyright owners who are unable to stop the illegal reproduction 

of their works. 

One particular area where copyright ownership is 

particularly abused involves the music industry. The illicit 
20 pirating of digital music across the Internet is causing 

immeasurable damages to the music industry. Heretofore, most 
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music content has been packaged and stored in an open, unsecured 
format that can be read and processed by any digital media 
player or recorder, i.e., content can be readily reproduced, 
stored and transmitted. To address this, the music industry has 
5 sought to create a secure domain to control the rampant pirating 
of music. 

One solution the music industry is exploring involves 
establishing standards for secure playback and recording devices 
that process specially encoded content. Numerous secure devices 

10 and systems have been proposed. For instance, U.S. Patent 

r 

^3 5,513,260, issued on April 30, 1996, entitled, Method and 

p Apparatus For Copy Protection For Various Recording Media, 
U * 

m describes a system in which an authorization signature is 

|i I 

s required before a protected CD can be played. PCT application 

!& 

TS WO 99/60568, published on November 25, 1999, entitled, Copy 

£3 

lH Protection Using Broken Modulation Rules, also discloses various 

£3 

53 anti-pirating systems. Each of these references is hereby 
incorporated by reference. 

In addition, a group referred to as SDMI (Secure Digital 

20 Music Initiative) , made up of more than 180 companies and 
organizations representing information technology, consumer 
electronics, telecommunication, security technology, the 
worldwide recording industry, and Internet service providers, is 
attempting to develop standards and architectures for secure 
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delivery of digital music in all forms. Information regarding 
SDMI can be found at their website at <www.sdmi.org>. 

One of the challenges with implementing compliant systems, 
such as those sought under SDMI, is that various competing 
requirements must be met. For instance, under SDMI: (1) people 
must be allowed to make an unlimited number of personal copies 
of their CDs if in possession of the original CD; (2) SDMI- 
compliant players must be able to play music already in a 
library; (3) SDMI must provide the ability to prevent large 
numbers of perfect digital copies of music; and (4) SDMI must 
prevent the distribution on the Internet without any 
compensation to the creator or copyright holder. Thus, SDMI 
requires that a limited form of copying must be allowed, while 
at the same time widespread copying must be prohibited. 

Unfortunately, such competing requirements create 
opportunities for hackers and pirates to defeat the protection 
schemes of the systems. Accordingly, protection schemes that 
are difficult to defeat, but will meet the open requirements for 
initiatives such as SDMI, must be developed. 

SUMMARY OF THE INVENTION 

This invention addresses the above-mentioned problems, as 
well as others, by providing a protection system and method that 
verifies ownership of a digital recording by requiring the 


presence of the entire medium (e.g., CD), or entire collection 
of tracks, as they existed when the digital recording was 
originally distributed. 

In a first aspect, the invention provides a system for 
marking a digital recording, wherein the digital recording 
includes a plurality of tracks, comprising: a mechanism for 
dividing the digital recording into a plurality of sections and 
associating a random number to each section; a mechanism for 
calculating an identifier as a function of the associated random 
numbers; and a watermarking mechanism for watermarking sections 
within a block of sections, wherein the watermark for each 
section includes the random number associated with the section 
and a portion of the identifier. 

In a second aspect, the invention provides a system for 
verifying a digital recording by ensuring a completeness of the 
digital recording, comprising: a mechanism for reading 
watermarks from each of a plurality of sections on the digital 
recording and extracting a first and second part from each 
watermark; a mechanism for calculating a first identifier as a 
function of the extracted first parts; a mechanism for 
calculating a second identifier based on a block of the second 
extracted parts; and a mechanism for comparing the first 
identifier and the second identifier. 



In a third aspect, the invention provides a program product 
stored on a recordable media for marking a digital recording 
having a plurality of tracks that, when executed, comprises: 
means for assigning a value to each of a plurality of sections 
5 within the digital recording; means for calculating an 

identifier as a function of all of the assigned values; and 
means for determining a watermark for each section within a 
block of sections, wherein each watermark includes the value 
assigned to the section and a portion of the identifier. 
10 In a fourth aspect, the invention provides a program 

product stored on a recordable media for verifying a digital 

""4 
I ii 

^ recording that, when executed, comprises: means for reading 

jf.s watermarks from each of a plurality of sections on the digital 

ffj 

*' recording and extracting a first part and a second part from 

If each watermark; means for calculating a first identifier as a 

if] function of the extracted first parts; means for calculating a 

□ 

13 second identifier based on a block of the second extracted 
parts; and means for comparing the first identifier and the 
second identifier . 

20 In a fifth aspect, the invention provides a method for 

preventing unauthorized use of a digital recording, wherein the 
digital recording includes a plurality of tracks, comprising the 
steps of: encoding the digital recording by partitioning the 
digital recording into a plurality of sections; generating a 
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random number for each section; calculating an identifier as a 

function of all of the generated random numbers; splitting the 

identifier into m partitions, wherein m is an integer; grouping 

the sections into blocks of m sections; and watermarking each 

5 section in each block with the random number for the section and 

one of the m partitions. 

In a sixth aspect, the invention includes a watermarked 

digital recording, comprising: a plurality of tracks; and a 

plurality of sections commingled with the plurality of tracks, 

10 wherein each section includes a random value and a value that is 
£3 

^3 dependent on the random values for all of the sections. 

%y 

w 
M 

• i3 BRIEF DESCRIPTION OF THE DRAWINGS 

h& 

jry The preferred exemplary embodiment of the present invention 

e3 

{f\ will hereinafter be described in conjunction with the appended 
ItS drawings, where like designations denote like elements, and: 

Figure 1 depicts a block diagram of a verification system 
in accordance with a preferred embodiment of the invention. 

Figure 2 depicts a graphical representation of a digital 
recording containing watermarked information in accordance with 
20 the invention. 
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DETAILED DESCRIPTION OF THE DRAWINGS 

1. Overview 

The present invention provides a system and method for 
protecting digital recordings from illicit processing. The term 
5 "processing," as used herein, may include any type of 

reproduction, transmission, playback, modification, etc., of the 
digital content. The term "digital content" may include any 
type of information, data, music, video, multimedia, etc. that 
can be stored in a digital format . The described embodiments 
1,Q accomplish protection by requiring a complete data set of the 
digital recording to be present before processing can occur. 

|j 

jpi For example, in the music industry, music is typically delivered 

iJ" 

y on an audio CD that comprises a collection of tracks or songs. 

Cfl 

$ This invention would thus provide a system and method requiring 

M 

IS the complete collection of tracks to be present before 

- HI 

v» processing. Since illicit music copying is often limited to a 

C3 
f i 

small subset of the songs on a CD, the ability to illegally post 
and download individual songs from the Internet would be 
substantially limited. 
20 Accordingly, the exemplary embodiments described herein 

require the presence of the whole medium (or entire collection 
of data as originally distributed) at the time of processing as 
proof of legal ownership. If a portion of the medium is not 
present, the processing of the digital recording can be aborted. 
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Although one important application of this invention relates to 
the delivery of music content, it should be understood that the 
invention has applications to any type of digital recording that 
has a plurality of tracks. For the purposes of this disclosure, 
u a plurality of tracks" shall be defined to include any digital 
recording that has more than one individually usable or 
desirable segment . 

2 . Exemplary Embodiment 

Referring now to the figures, Figure 1 depicts an anti- 
pirating system 10 for encoding and verifying a digital 
recording 12 having a plurality of tracks, such as a music CD. 
Encoding is accomplished with a watermark encoder 14, and 
verification is accomplished with a verification system 28. In 
this embodiment, verification system 28 is shown as part of a 
compliant device 26 (e.g., a CD recorder or player), but could 
exist independently from other components. 

Watermark encoder 14 receives digital recording 12 and 
generates a watermarked digital recording 24. Watermark encoder 
14 comprises various modules for encoding digital recording 12. 
These modules include a sectioning mechanism 16, a random number 
generator 18, a hash function 20, a portioning function 22, and 
a watermarking system 23. The process of how these modules 
encode digital recording 12 is described in detail with regard 
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to Figure 2. Once encoded, a watermarked digital recording 24 
is provided, which can be distributed or sold to the general 
public in a format that will allow compliant systems, such as 
compliant device 26, to limit illicit processing. 
5 A compliant device 26, as shown in Figure 1, may include 

any type of system for processing watermarked digital recording 
24, e.g., a recording device for making copies of a watermarked 
CD. While there are no specific limitations placed on compliant 
device 26, it is understood that it generally comprises a system 
10 compliant with watermark encoder 14, i.e., it can analyze a 

1:3 

□ watermark created by watermark encoder 14. Compliant device 26 

N 

*!? includes a verification system 28 for verifying watermarked 

It r? 

L y 

3 " ; digital recording 24, a processing system 38 for performing the 
actual processing operation of the digital recording (e.g., 

U 

lr§i record/playback/ transmit) , and an abort system 40 for aborting 

Q 

|fl processing when the inputted digital recording is not properly 

is 3 

Q verified. 

Verification system 28 comprises various modules for 
verifying the watermark in watermarked digital recording 24. 
20 These modules may include a watermark extractor 30, a hash 

function 32, a coalescing function 34, and comparator 36. The 
operation of these modules is described in more detail below 
with reference to Figure 2 . 
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Figure 2 depicts a watermarked digital recording 24 
comprised of: (1) a digital recording 12 having a plurality of 
tracks (Tl, T2 , T3...TN) , and (2) a plurality of sections 44 (SI, 
S2, S3 ... Sn) that contain watermark information. The watermark 
information is commingled with the tracks such that each track 
has several sections of watermark information associated 
therewith. The placement of the watermark information along 
side the tracks may be accomplished in any manner known in the 
art . 

As noted, digital recording 12 comprises digital content, 
such as a music CD containing N songs. Watermark information is 
stored in each of the n sections 44. Each section 44 includes 
an individual watermark element (R1D1, R2D2, R3D3 ...) that is 
required to be present to verify any portion of digital 
recording 24. Thus, if a section is missing, digital recording 
24 will not be verified. Accordingly, a single track (e.g., Tl) 
cannot be processed unless all of the other tracks are present. 
The sections are logically grouped into blocks of sections 46 
and 48, with each block containing m sections where m is any 
integer. 

The procedure for creating watermarked digital recording 24 
from digital recording 12 is as follows. First, sectioning 
mechanism 16 of watermark encoder 14 partitions digital 
recording 12 into a plurality of logical sections 44 (SI, S2 ... 
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Sn) , each of a predetermined length. For example, for a music 
CD, each section 44 may be approximately 15 seconds in length. 
Next, random number generator 18 generates an r-bit random 
number Ri for each section i. Each r-bit random number (Rl, R2 
... Rn) may be any size, but preferably comprises 4 to 16 bits. 
Next, a d-bit hash of these random numbers is generated by hash 
function 20. The resulting d-bit value, referred to herein as 
identifier D is given by D = H(R1, R2 , R3.») , where H is hash 
function 20. Hash functions are well known in the art, and hash 
function 2 0 may comprise any function that can operate on the 
random numbers and generate a single value D, e.g., a sum value. 
The d-bit hash may be of any size, but preferably comprises 32 
to 80 bits of data. 

The next step is to split identifier D into m portions, and 
to map each of the m portions into each block of sections 46, 
48. The splitting process is accomplished with portioning 
function W P" 22, where P(D) = Dl, D2 ... Dm. In the embodiment 
depicted in Figure 2, m=4 , denoting that each block comprises 
four sections and identifier D is split into four portions. The 
d-bit identifier D may be split and mapped in any manner. For 
example, groups of bits ranging from least significant to most 
significant may be split into portions Dl, D2, D3...Dm. It is 
understood that the number of sections "m" in a block can be any 
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integer, but preferably is between 1 and 16. In the case where 
m=l, each section is its own block. 

Once all the random numbers (RI, R2 ... Rn) and identifier 
portions (Dl, D2 ... Dm) are calculated, each section is 
5 watermarked by watermark system 23 with: (1) the section's 
associated random number Ri, and (2) one of m identifier 
portions (Dl, D2 ... Dm) . In this exemplary embodiment, each 
section i is given a watermark WMi, where WMi = Ri D(l + (i mod 
m) ) . Thus, referring to Figure 2, a first block of sections 46 
10 are watermarked with R1D1, R2D2, R3D3 , and R4D4; a second block 

Q 

* ,s J of sections 48 are watermarked with R5D1, R6D2 , R7D3 and R8D4 ; 
1 J 

:~ and so on. In this exemplary embodiment, each of the identifier 
I J 

I j portions (Dl, D2...Dm) is mapped into a block using the "mod" 

in 

B operator. However, it is understood that any other method of 

|w> 

lj$ mapping the D partitions into each block may be utilized. The 

O 

IH result is a watermarked digital recording 24 that includes n 

9 

^3 watermarked sections commingled with the N tracks. 

Verification of watermarked digital recording 24 is 
accomplished by verifying that each of the n watermarks encoded 

20 by encoder 14 exist. Verification system 28 achieves this in 
the following manner. First, watermark extraction system 3 0 
opens an inputted digital recording, determines how many 
sections n' exist, and reads each of the n' watermarks. The 
random numbers (RI', R2' ... Rn') and identifier portions (Dl', D2'... 
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Dm') are then extracted. Identifier portions (Dl', D2' ... Dm') may 
be extracted on a block-by-block basis based on an inverse of 
the mapping formula used to map the portions into blocks by 
encoder 14 . 

5 Next, a first verification identifier D' is calculated by 

the same hash function 20 that was used by encoder 14. Thus, D' 
= H(R1', R2' ...Rn') . Then, a second verification identifier D" is 
calculated by coalescing function 34, which combines the 
extracted identifier partitions Dl', D2'...Dm'. Coalescing function 

ri 

10 34 operates in an inverse manner in which portioning function P 

%J 

y 22 splits identifier D. Accordingly, D" = P" 1 (D1', D2' ...Dm'). 

ci 

iJ Next, comparator 3 6 compares D' and D" to determine if all of the 

14 

^ sections, and therefore the entire digital recording, is 

f y present. If D' is not equal to D", this indicates (1) that not 

15 all sections are present or (2) that some of the sections have 

■c a. 

U 

C3 been modified, and abort mechani sm 40 will abort the processing. 
If the entire digital recording is present, processing system 38 
will proceed with the desired processing (e.g., 
record/playback/ transmit) . 

20 The proposed system and method is effective since if one or 

more section is changed or left out, the verification system's 
hash calculation D' = H(R1', R2' ...Rn') will be different from the 
encoder's hash calculation D = H(R1, R2 ... Rn) , and therefore not 
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match with the extracted and combined identifier D" = P _1 (D1', D2' 
...Dm') . It is of negligible probability that a collection with 
missing, altered, or replaced sections will provide the same 
hash value as the original content . 

If the identifier D is split into m parts, these parts 
reoccur periodically, and the number of possible different 
watermarks is m*2 r , where r is the number of bits in each random 
number. Accordingly, even if a few sections have the same 
watermark, the system is still effective as long as most of the 
watermarks are different. (Otherwise, a subset of sections 
could falsely prove the presence of the whole CD content.) If 
there are 300 sections on a given music CD, it is relatively 
easy to achieve an implementation wherein almost all watermarks 
are different (e.g., m = 5, r = 6 will achieve over 300 
watermarks) . 

The length of the watermark r + d/m can be freely chosen, 
but should be chosen to prevent substitution attacks using 
sections from other CD's kept in a manageable size pre- 
calculated table. The following parameters can be freely 
chosen, but have preferred ranges and values as follows: r = 
4...16; d = 32-80; m = 1...16; m-2 r > 300; and r + d/m > 16. 

It is understood that systems, mechanisms, and modules 
described herein can be implemented in hardware, software, or a 
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combination of hardware and software. They may be implemented 
by any type of computer system - or other apparatus adapted for 
carrying out the methods described herein. A typical 
combination of hardware and software could be a general -purpose 
5 computer system with a computer program that, when loaded and 
executed, controls the computer system such that it carries out 
the methods described herein. Alternatively, a specific use 
computer, containing specialized hardware for carrying out one 
or more of the functional tasks of the invention could be 

10 utilized. The present invention can also be embedded in a 

C3 
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Id 
Id 
m 


computer program product, which comprises all the features 
enabling the implementation of the methods and functions 
described herein, and which - when loaded in a computer system - 
is able to carry out these methods and functions. Computer 


fS program, software program, program, program product, or 

P 

lf\ software, in the present context mean any expression, in any 


language, code or notation, of a set of instructions intended to 
cause a system having an information processing capability to 
perform a particular function either directly or after either or 
20 both of the following: (a) conversion to another language, code 
or notation; and/or (b) reproduction in a different material 
form. 

The foregoing description of the preferred embodiments of 
the invention have been presented for purposes of illustration 
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and description. They are not intended to be exhaustive or to 
limit the invention to the precise form disclosed, and obviously 
many modifications and variations are possible in light of the 
above teachings,. Such modifications and variations that are 
5 apparent to a person skilled in the art are intended to be 

included within the scope of this invention as defined by the 
accompanying claims. 
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